Senior Penetration Tester

About the Role The Senior Penetration Tester is responsible for establishing, governing, and performing penetration testing activities within the ContiTech SOC. The role drives enterprise-wide testing standards and provides expert guidance to stakeholders to improve the overall security posture. What You'll Do

• Design, implement, and govern enterprise-wide penetration testing standards, processes, and methodologies.
• Conduct advanced penetration tests and security assessments across networks, applications (including web applications and mobile environments), and infrastructure.
• Identify, exploit, and assess vulnerabilities, and translate findings into risk-based remediation actions.
• Act as subject matter expert and advisor to IT, application owners, and business stakeholders on security risks and architecture.
• Manage and continuously improve penetration testing services, including external providers and tooling.
• Support incident response and threat assessments through offensive security expertise.
• Communicate technical findings clearly to technical and non-technical stakeholders and senior management.
• Contribute to cybersecurity governance, awareness, and integration with SOC operations and detection capabilities. What We're Looking For
• Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent experience).
• Relevant certifications such as OSCP, CEH, or GPEN.
• Strong knowledge of penetration testing methodologies, tools (e.g., Metasploit, Burp Suite, Nmap), and frameworks.
• Deep understanding of network, system, and application security.
• Solid knowledge of cybersecurity governance, risk management, and IT service management.
• Strong analytical, problem-solving, and communication skills.
• 5–7+ years of experience in cybersecurity with a focus on penetration testing or offensive security.
• Proven experience performing and leading complex penetration testing engagements and security assessments.
• Experience working within SOC environments or closely with incident response and threat detection teams.
• Experience managing external vendors or working in service-oriented security delivery models.
• Experience in global, cross-functional enterprise environments.
• Demonstrated ability to translate technical vulnerabilities into business risk and mitigation strategies.
• Additional Information: Hybrid work setup; HMO upon hire; Values-based culture; Learning Opportunities. Compensation & Benefits This section reflects the information available in the posting about work arrangement and benefits: Hybrid setup, HMO upon hire, values-based culture, and learning opportunities.